Tax season is also peak season for identity theft. Malwarebytes researchers spotted criminals trading stolen tax records on dark web forums.

Security Boulevard is a leading cybersecurity news and information portal, offering articles, analysis, and insights on cybersecurity threats, vulnerabilities, and best practices. From the latest trends in cyber threats to expert commentary on security technologies and compliance frameworks, Security Boulevard provides resources for security professionals, IT leaders, and business executives seeking to protect their organizations from cyber attacks and data breaches.

Security Boulevard

Tax season is peak season for Stolen Identity Refund Fraud (SIRF), where criminals buy stolen PII on dark web forums to file fake tax returns. Malwarebytes researchers found bulk packages of 100 complete tax forms selling for $2,000 ($20 each), with older records going for under $4. The underground ecosystem includes Initial Access Brokers selling access to compromised accounting firms, forgery services like 'Fakelab' producing fake W-2s for $20-$40, and tutorial hubs detailing cashout schemes. To protect yourself: file taxes early, guard your SSN, watch for phishing, use strong passwords, monitor credit reports, and consider an IRS Identity Protection PIN.

Your tax forms sell for $20 on the dark web

What is Stolen Identity Refund Fraud (SIRF)?

See if your personal data has been exposed.